# AML/CFT Compliance for Crypto Businesses

Operate With Confidence

A policy pack is only a starting point. Check how customers join, how assets move and who responds when something needs attention, then align the documents with those steps.

At a glance

## Is this the right service?

Crypto businesses reviewing compliance before launch, licensing, banking or an operational change.

What it can cover

- Customer and transaction review
- Control gap assessment
- Policy and procedure work
- Transfer-information questions

[Get Expert Advice](https://ape.law/#contact)

[Check if this fits](https://ape.law/services/aml-cft-compliance-crypto-businesses#service-fit)

01 · Check the fit

## When this service fits

### You have policies but unclear processes

Your team needs to connect the written rules to daily onboarding and transactions.

### The business model has changed

New users, markets, wallets or products need to be reflected in the review.

### A bank or regulator has questions

You need to organise the relevant controls, records and responsibilities.

02 · What we can help with

## What the work covers

### Customer and transaction review

Map users, counterparties, wallets, jurisdictions and asset flows.

### Control gap assessment

Review onboarding, monitoring, screening, escalation and recordkeeping against the agreed requirements.

### Policy and procedure work

Prepare or review the documents that explain how the controls operate and who is responsible.

### Transfer-information questions

Assess which transfer-information rules need review for the proposed flows and counterparties.

03 · How to get started

## What to bring

Start with what you have. These details help frame the first discussion.

Send the basics

- Current policies and customer onboarding flows
- Transaction, wallet and counterparty maps
- Responsibility charts and any bank or regulator requests

Then define the scope

### Focus the first conversation on the decision you need to make.

Applicable obligations depend on the activity and jurisdiction. A document review is not certification that the business is compliant.

[Get Expert Advice](https://ape.law/#contact)

04 · See related matters

## How Ape Law approached similar questions

These published matters show the decision process. Another project's facts, rules and outcome may differ.

![Video thumbnail for This Crypto Exchange Thought the Licence Was the First Step](https://ape.law/assets/legacy-pages/1aac83037c2358a9b5066ac9fa9466416f38df9a04ed93fb415a1963f8982b10.png)

Licensing

### [The licence was not the first step.](https://ape.law/case-studies/crypto-licence-starts-before-application)

Started with the application

Watch or read the case study

05 · Common questions

## Common questions

Is this only a KYC document review?

No. The scope can also examine transaction flows, monitoring, sanctions, escalation, governance and the records behind those processes.

Can you review policies prepared by another provider?

Yes. The question is whether they fit the actual business and whether the team can explain how they are used.

Do you operate our compliance function?

Advisory and document work should be distinguished from day-to-day monitoring or an appointed compliance role. Any operational responsibilities need a separate agreement.

A free tool from Ape Law

### Check a UAE crypto licence

Check the company, licence status and permitted activities against the regulator’s register.

[Open the licence tracker](https://tracker.ape.law/)

## Do your controls match how the business works?

Describe the activity, existing policies and the questions that prompted the review.

[Get Expert Advice](https://ape.law/#contact)

Canonical page: https://ape.law/services/aml-cft-compliance-crypto-businesses